
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vOsWB29wpmtvdkxpD8XQ0R6AR3Y.roa
File: vOsWB29wpmtvdkxpD8XQ0R6AR3Y.roa (raw, json)
Hash identifier: OeSkOqI7+gizS3qO1utUigUIc513IRxvjR7484RSp3U=
Subject key identifier: BC:EB:16:07:6F:70:A6:6B:6F:76:4C:69:0F:C5:D0:D1:1E:80:47:76
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 2723
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vOsWB29wpmtvdkxpD8XQ0R6AR3Y.roa
Signing time: Fri 22 Aug 2025 08:43:36 +0000
ROA not before: Fri 22 Aug 2025 08:43:36 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 180.218.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10019 (0x2723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 22 08:43:36 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=BCEB16076F70A66B6F764C690FC5D0D11E804776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:18:0a:92:a5:90:90:c5:55:81:3c:70:5f:
65:6d:57:2d:a0:ae:2c:98:8c:84:fb:ab:5d:95:8d:
aa:25:56:2a:3d:ee:18:a8:37:ec:04:db:42:ca:bf:
d5:48:c0:14:4a:af:89:7a:ce:ed:27:27:2f:4c:68:
65:5f:99:58:86:f3:26:5b:aa:1c:66:3a:1e:ba:7f:
34:eb:17:93:03:3c:87:ae:27:5c:43:04:0c:e5:e1:
de:bf:49:a8:86:b8:a1:a1:c6:6e:51:c6:10:48:b1:
14:c7:ad:1f:01:a2:ed:77:74:bd:15:c5:2e:11:90:
2f:14:13:fb:54:55:06:73:0b:e3:ee:53:d2:f6:e9:
e2:78:95:f0:89:1a:23:45:4f:e6:a7:c1:57:80:72:
c5:ea:8e:2e:f4:6d:9d:92:28:12:b8:1a:fa:65:e8:
7c:e0:c0:a6:28:bd:f1:46:dc:60:f0:ba:7c:b7:35:
c0:7c:a7:ed:74:1c:45:c6:96:7b:92:62:c7:15:77:
59:e1:bf:95:25:1b:3c:66:a5:26:7c:f7:4e:ef:cb:
a3:a9:48:b7:ff:67:a3:e7:94:66:59:03:a3:45:1b:
f9:d6:ff:30:20:5a:71:5e:50:da:9d:59:0d:9b:bb:
89:09:8e:67:d2:d5:21:86:c0:48:30:5d:be:9a:13:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EB:16:07:6F:70:A6:6B:6F:76:4C:69:0F:C5:D0:D1:1E:80:47:76
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vOsWB29wpmtvdkxpD8XQ0R6AR3Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.64.0/20
Signature Algorithm: sha256WithRSAEncryption
22:19:75:83:37:67:a9:7c:9c:2a:a9:c3:3e:94:88:1d:6d:4b:
9b:9e:d6:92:c1:72:fc:01:0f:ff:6a:3c:6e:5c:a3:a3:50:af:
cc:86:b9:5b:d4:aa:77:59:52:e1:0d:87:2e:9a:42:a3:2f:36:
0f:8d:77:ea:0c:be:d5:da:f7:47:bf:2a:ec:44:bc:a3:f3:1c:
09:4a:34:96:4b:39:58:5f:0d:2e:b3:53:d6:25:f7:9b:eb:0f:
78:ed:bc:23:15:19:a0:9b:a5:47:09:c6:1c:43:84:c5:6c:5b:
70:e9:e9:85:37:e7:d2:85:02:06:2a:48:ec:24:5f:67:c9:1b:
5e:68:7e:7f:11:2a:c2:2a:e4:22:e4:e2:73:9e:b8:e8:c6:3b:
6f:65:3e:7e:f4:56:8d:d6:54:ff:d1:44:b1:81:3b:97:dd:98:
a7:1a:7b:68:ed:7f:af:39:44:c8:a2:54:01:b3:50:98:b2:bc:
d4:33:07:30:1a:63:55:47:07:ac:b6:fe:62:63:f7:ee:97:53:
3c:e2:38:59:ba:f1:bd:d3:8c:37:86:59:1a:a0:a8:34:6a:2f:
ff:02:af:6d:d7:5c:f3:bf:f9:df:61:bd:1d:02:4e:65:17:41:
bc:36:85:c4:72:99:7f:3c:4b:32:38:35:a2:8a:73:ac:3b:80:
87:b9:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:37 2025 by rpki-client